Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          K84YtRfk/8rUnoMpvhjSIEsAWFgvlYILokY4CupyU+M=
Subject key identifier:   10:1A:1D:0D:B2:17:26:3A:BF:7E:64:08:C3:57:9B:7F:5F:C9:B8:22
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       6F9D26248E4EEBD602746ECF92F99B65C4E9A1FA
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:01 +0000
ROA not before:           Fri 15 Sep 2023 07:55:01 +0000
ROA not after:            Fri 13 Sep 2024 08:00:01 +0000
asID:                     266535
IP address blocks:        160.238.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9d:26:24:8e:4e:eb:d6:02:74:6e:cf:92:f9:9b:65:c4:e9:a1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:01 2023 GMT
            Not After : Sep 13 08:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:48:3f:31:d2:ff:21:42:75:f7:ba:9a:33:
                    8a:05:cc:fa:7a:0e:0d:c0:9d:a1:4f:e5:2f:83:f2:
                    7d:51:74:75:29:95:37:06:06:e8:c2:73:5a:2d:fe:
                    79:e8:c3:d2:cc:c5:19:3f:b6:d6:be:d1:09:29:46:
                    1c:d9:84:b7:e1:ee:d1:b4:03:87:42:d6:a9:9b:99:
                    79:7a:2e:a3:25:0d:92:39:91:a8:ad:87:8c:b6:08:
                    43:5a:9a:e6:8b:ee:d0:37:24:6a:7e:8c:ae:b6:d2:
                    fe:7b:f3:5e:c2:f0:13:31:fa:8b:f1:1c:8d:51:d7:
                    58:e3:c2:9e:90:81:73:91:eb:44:5c:7d:3f:fb:2e:
                    69:a0:d3:60:d4:67:4c:bb:15:fa:12:ac:ab:10:e1:
                    5d:58:82:a1:4d:77:30:b1:99:23:cb:ea:b3:9b:b7:
                    1b:3b:f1:e1:a5:7a:71:d3:6e:38:f5:b0:93:b7:53:
                    3e:d1:62:c6:12:e1:c7:d2:57:31:b3:89:54:77:85:
                    61:88:ce:2c:b7:b1:4d:64:5b:a9:f3:6a:47:22:2d:
                    f2:70:cb:3e:93:31:c4:3e:77:c5:0c:e1:77:ee:63:
                    18:3e:3b:13:f9:83:28:b9:f6:7d:8d:dc:8c:31:dc:
                    e9:ee:39:18:09:93:41:d9:86:e7:d9:75:e2:c3:34:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:1D:0D:B2:17:26:3A:BF:7E:64:08:C3:57:9B:7F:5F:C9:B8:22
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:7c:18:7c:cd:3f:09:e2:9b:50:86:f9:d9:8a:7c:6a:e8:
         d4:cc:d5:56:07:83:45:c9:d1:cc:e7:22:19:5b:75:4a:5a:55:
         18:a7:49:99:4c:bf:d7:03:03:98:9e:7c:4d:66:69:d9:f9:94:
         ef:8c:a7:47:bd:e7:e4:d8:ef:ab:e0:bb:55:71:3b:fb:c0:9b:
         54:19:f5:f0:a4:60:e2:e3:6f:07:cf:6c:e1:9a:6f:67:fb:67:
         f1:0d:f1:39:f2:40:c8:42:4e:52:77:7a:50:c9:ca:2c:19:97:
         6d:74:26:95:94:38:a2:e0:0c:05:66:c2:76:19:f0:a6:f9:2a:
         c1:8c:4e:42:3a:f0:de:d2:3f:05:fd:b1:7a:5c:84:be:e8:8f:
         8b:d1:c9:23:e1:d7:11:4a:c3:f5:e8:b0:2d:50:2b:96:73:25:
         ae:71:b3:ce:8b:e4:b0:b6:a1:a2:1f:78:7a:d5:93:7e:6d:91:
         8b:59:40:57:0f:e6:db:83:2d:32:52:a8:79:41:c4:19:bb:17:
         a7:e4:ce:7d:70:11:67:cc:9b:48:a2:c8:c2:28:0f:7d:07:fa:
         a6:f8:e9:29:f9:f7:28:65:91:03:df:3d:94:3c:b1:65:2c:96:
         17:e6:69:a7:cf:2d:12:62:6d:7e:65:e2:3f:92:bc:5f:ee:48:
         84:7e:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org